Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
File: AmWtlOeXE1kGs-EahHyOr9CU50U.mft (raw, json)
Hash identifier: 6eebO8L+h7TfFqNeyCF9DEw+SIEBIhJf8M7SwbguW+E=
Subject key identifier: 43:01:CB:1F:CE:5A:A2:4D:E4:79:B1:29:59:B1:B3:AF:3D:9B:3D:57
Authority key identifier: 02:65:AD:94:E7:97:13:59:06:B3:E1:1A:84:7C:8E:AF:D0:94:E7:45
Certificate issuer: /CN=0265ad94e797135906b3e11a847c8eafd094e745
Certificate serial: 0198A15FCC2D82996B5F9A378144AB84C8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
Manifest number: 1630
Signing time: Wed 13 Aug 2025 03:01:06 +0000
Manifest this update: Wed 13 Aug 2025 03:01:06 +0000
Manifest next update: Thu 14 Aug 2025 03:01:06 +0000
Files and hashes: 1: AmWtlOeXE1kGs-EahHyOr9CU50U.crl (hash: RVXp69/+h2r6xPUctMJohZo5YlUugnzJ3MT17UmQ+wg=)
2: SZBAF2HXjdb03PkJpOVysksT_8k.roa (hash: Krg8gvZLzhIMGcL+cCXvbm4nAV3yJmkdyGbkdVJo2Lc=)
3: ubILPtIGLcaC5tdulnfQHq0BdoU.roa (hash: BJYBDA5/MNdL6MG7ef+wXgyzjJiGCTkzcJs87HpsXHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:5f:cc:2d:82:99:6b:5f:9a:37:81:44:ab:84:c8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0265ad94e797135906b3e11a847c8eafd094e745
Validity
Not Before: Aug 13 03:01:06 2025 GMT
Not After : Aug 14 03:01:06 2025 GMT
Subject: CN=4301cb1fce5aa24de479b12959b1b3af3d9b3d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:de:3d:f9:74:58:2e:26:95:f1:6b:cc:14:ea:
8e:ee:08:b1:c0:5e:10:63:97:57:9e:bb:a9:a2:09:
29:47:65:3c:3d:59:c0:fc:a0:18:f9:70:ad:02:51:
25:b5:34:46:35:c9:b4:2a:04:72:10:49:7d:49:c0:
23:81:9f:dd:34:88:7b:5d:87:f5:e0:9e:ae:0f:b4:
a5:58:51:e5:71:3b:1f:03:a0:2c:81:6d:f4:d9:d7:
64:39:f5:e2:bc:60:97:c9:5b:2e:ca:66:29:e4:a9:
13:26:e6:7f:d0:c4:42:49:40:92:91:a8:bb:42:1d:
a1:69:cd:e0:c2:fe:17:7e:86:f4:ac:7d:f1:d0:d9:
0a:eb:fc:78:8d:b4:9e:f9:a2:2a:de:45:81:74:80:
0f:3e:3a:ce:34:a9:1d:69:92:62:b9:05:5d:17:f4:
64:5f:15:7e:7c:ad:d1:eb:c8:04:98:e9:3c:a5:31:
0a:ec:18:36:01:db:95:cf:0a:10:c8:12:26:ad:1f:
a3:7c:18:e7:36:99:a5:cd:fb:b8:63:df:b1:14:29:
d4:2e:cb:b4:53:ef:39:51:e6:02:07:8f:05:68:76:
ed:26:8b:a5:a8:16:96:a3:43:fa:3a:d9:0e:44:af:
82:82:55:db:0f:dc:a7:dd:e2:d4:80:e2:74:d8:80:
d1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:01:CB:1F:CE:5A:A2:4D:E4:79:B1:29:59:B1:B3:AF:3D:9B:3D:57
X509v3 Authority Key Identifier:
keyid:02:65:AD:94:E7:97:13:59:06:B3:E1:1A:84:7C:8E:AF:D0:94:E7:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:da:fd:5f:2e:38:7a:a2:73:54:31:a7:b3:1c:28:a5:40:0c:
fc:cd:25:e3:46:1b:99:25:30:3c:87:0b:2e:2f:a7:5c:d1:d5:
9f:9b:05:3e:33:70:05:57:86:6e:c1:cc:10:a2:22:4a:38:20:
31:f7:88:2d:9d:e1:ca:7a:88:b1:b7:82:27:56:81:c2:36:30:
b8:44:35:3e:dc:1c:27:d9:1a:5d:77:67:02:0a:0a:2d:2a:eb:
b3:ff:34:ae:88:9d:3b:65:63:1a:42:94:2d:d7:58:ec:f0:51:
98:2a:7f:bd:51:5b:96:b3:76:f0:96:60:7a:71:df:04:9f:19:
f9:c2:9f:c1:57:63:80:20:68:d8:77:cd:10:fe:26:3a:e9:43:
17:73:eb:46:86:38:a1:b1:01:64:6d:ec:72:46:8f:cd:49:42:
19:f7:30:40:7b:cc:0e:5f:56:ae:4f:f4:4b:1a:0c:1e:56:b4:
93:2f:de:64:77:04:99:5b:1c:ea:04:2f:04:55:8c:aa:3f:ce:
01:f5:77:e5:54:8e:36:f6:18:3d:cc:7e:07:25:fd:51:8b:2b:
b8:3f:55:1e:23:e6:4c:32:f1:9f:38:b3:c8:a9:d0:d6:d1:b2:
da:41:c7:fe:b2:d1:f4:1f:f6:6f:8b:3b:88:b0:d8:a6:b0:a7:
d3:19:87:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZihX8wtgplrX5o3gUSrhMivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNjVhZDk0ZTc5NzEzNTkwNmIzZTExYTg0N2M4ZWFmZDA5
NGU3NDUwHhcNMjUwODEzMDMwMTA2WhcNMjUwODE0MDMwMTA2WjAzMTEwLwYDVQQD
Eyg0MzAxY2IxZmNlNWFhMjRkZTQ3OWIxMjk1OWIxYjNhZjNkOWIzZDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN49+XRYLiaV8WvMFOqO7gixwF4Q
Y5dXnrupogkpR2U8PVnA/KAY+XCtAlEltTRGNcm0KgRyEEl9ScAjgZ/dNIh7XYf1
4J6uD7SlWFHlcTsfA6AsgW302ddkOfXivGCXyVsuymYp5KkTJuZ/0MRCSUCSkai7
Qh2hac3gwv4Xfob0rH3x0NkK6/x4jbSe+aIq3kWBdIAPPjrONKkdaZJiuQVdF/Rk
XxV+fK3R68gEmOk8pTEK7Bg2AduVzwoQyBImrR+jfBjnNpmlzfu4Y9+xFCnULsu0
U+85UeYCB48FaHbtJoulqBaWo0P6OtkORK+CglXbD9yn3eLUgOJ02IDRKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMByx/OWqJN5HmxKVmxs689mz1XMB8GA1UdIwQY
MBaAFAJlrZTnlxNZBrPhGoR8jq/QlOdFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW1XdGxPZVhFMWtHcy1FYWhIeU9yOUNVNTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jYjI4YjYtMjk2Ni00NDRhLThmYmQt
OTdmYjkwMGQ2NjhiLzEvQW1XdGxPZVhFMWtHcy1FYWhIeU9yOUNVNTBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9jYjI4YjYtMjk2Ni00NDRhLThmYmQtOTdmYjkwMGQ2Njhi
LzEvQW1XdGxPZVhFMWtHcy1FYWhIeU9yOUNVNTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtr9Xy44
eqJzVDGnsxwopUAM/M0l40YbmSUwPIcLLi+nXNHVn5sFPjNwBVeGbsHMEKIiSjgg
MfeILZ3hynqIsbeCJ1aBwjYwuEQ1PtwcJ9kaXXdnAgoKLSrrs/80roidO2VjGkKU
LddY7PBRmCp/vVFblrN28JZgenHfBJ8Z+cKfwVdjgCBo2HfNEP4mOulDF3PrRoY4
obEBZG3sckaPzUlCGfcwQHvMDl9Wrk/0SxoMHla0ky/eZHcEmVsc6gQvBFWMqj/O
AfV35VSONvYYPcx+ByX9UYsruD9VHiPmTDLxnzizyKnQ1tGy2kHH/rLR9B/2b4s7
iLDYprCn0xmHag==
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:25:44 2025 by rpki-client